SAP Fiori · Web Dispatcher & Communication Security

Two cookie flags harden Fiori sessions. Which one blunts XSS cookie theft, which one keeps the cookie off plaintext channels — and don't mix them up?

Answer locked. Get the free KnowCard app to reveal it — plus spaced-repetition review so it actually sticks.

This is one card from the KnowCard library — thousands more across SAP, Linux, Python and more. In the app you get the answer, AI explanations, and cards that come back right before you would forget them. Free to start on iOS, Android or the web.

More in Web Dispatcher & Communication Security

The client-to-Web-Dispatcher channel is HTTPS for both transactional and fact sheet apps. What payload distinguishes them on that same channel?

OData flows from the browser inward. So is the front-end-to-back-end hop also HTTP/OData, and what secures it?

Which profile parameters turn on HTTPS handling in the Web Dispatcher instance profile?

Three scenarios are configured after installing Web Dispatcher: HTTP, SSL termination, SSL reencryption. What actually differs between the two SSL scenarios, and when does it matter?

You've enabled TLS/SSL across the Fiori landscape. Which connection is still unencrypted, and what fixes it?

Internet users reach Gateway servers behind the corporate firewall. What is the single published endpoint making this possible, and what breaks if it's bypassed?

Start learning today

Free to start — download the app or use it in your browser.